In a Citrix Virtual Apps and Desktops environment, the FlexCast Management Architecture (FMA) services use the local computer account of the Delivery Controller for database authentication purposes. Specifically, these services run under the NT AUTHORITY\Network Service account, which uses the Delivery Controller's machine account for accessing the SQL databases. This setup ensures that the passwords are automatically changed every 30 days, enhancing security
https://www.basvankaam.com/inside-citrix-chapter-eighteen-the-one-with-all-the-fma-core-services/#:~:text=,accounts%20are%20usually%20very%20dangerous
A - "All services run under the NT AUTHORITY\Network service account – the controller machine account is used for authorization"(https://www.citrix.com/blogs/2016/04/14/under-the-hood-of-xenapp-xendesktop/)
Correct answer is A.
These FMA services leverage the Delivery Controller’s machine account to authenticate against SQL. CWS-215-1I: Citrix Virtual Apps and Desktops 7 Administration On-Premises
and in Citrix Cloud
C: is Correct!
https://support.citrix.com/article/CTX127998
All runtime access to the central XenDesktop site database is performed by the services running on each controller. These services gain access to the database through their Active Directory machine accounts. This database access is sufficient to allow full day-to-day operation of the site including use of Desktop Studio, Desktop Director, and the service-specific SDKs.
correct is C... All FMA Service run under the NT Authority\network service account. Also, when authenticating to the central site database (this is where the configuration service plays an important role al well) all service use the local computer account of the machine that are currently running on
Page 146: https://www.basvankaam.com/wp-content/uploads/2019/03/Inside-Citrix-The-FlexCast-Management-Architecture.pdf
Correct answer is A. The FMA services utilize the controller's AD machine account for accessing SQL during runtime, so user accounts are not
leveraged.
The services gain access to the database server through their machine account logon (names of the form ‘DOMAIN\MACHINE$’). These logons do not need to be members of any server-level roles.
A is the correct answer - please see the link below which explicitly note Controller Machine Account is used to grant to permission to database:
https://support.citrix.com/article/CTX127998
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
vess666
Highly Voted 4 years, 8 months agofahad6691
Highly Voted 4 years, 7 months agoexamencitrix
Most Recent 1 year agoimjoe
1 year agoMassRattler
1 year agoLovelyColleague
2 years, 5 months agod0bermannn
2 years, 11 months agokennethwan
3 years agoVache14
3 years agojorge1804
3 years, 4 months agoforeigner78
3 years, 5 months agoFwizy
3 years, 6 months agom3m0
3 years, 7 months agoXtrem
3 years, 9 months agoctxnerd
3 years, 9 months agoNickNs
4 years agoLance_D
4 years, 1 month ago